Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
File:                     rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft (raw, json)
Hash identifier:          vn/CCF7lAdN9qxBrdZQ+lk8BMLlCLXejTE7homsNchY=
Subject key identifier:   68:96:52:A1:FA:6F:13:34:A8:03:B6:2A:AA:0E:47:87:36:81:06:49
Authority key identifier: AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B
Certificate issuer:       /CN=A914530B/serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
Manifest number:          52
Signing time:             Thu 15 May 2025 06:34:59 +0000
Manifest this update:     Thu 15 May 2025 06:34:58 +0000
Manifest next update:     Thu 22 May 2025 06:34:58 +0000
Files and hashes:         1: rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl (hash: tpKuhu1I7C2FoZA6N+4LSM73Falc03hp9TIV8nQ0Ryo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl
                          rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 06:34:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914530B, serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B
        Validity
            Not Before: May 15 06:34:58 2025 GMT
            Not After : May 22 06:34:58 2025 GMT
        Subject: CN=68258b13-be92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5b:96:fc:1a:db:49:dc:28:58:21:24:03:b7:
                    a2:91:61:9b:0d:a1:76:4d:4c:06:d1:5b:e7:65:9a:
                    36:eb:c9:3f:40:34:eb:b0:ce:2a:68:b8:4b:70:ba:
                    67:1d:33:36:95:1a:4d:ba:1d:28:44:ea:13:34:5e:
                    ba:de:4f:97:fe:08:1f:4e:65:a5:ec:ab:cc:c4:3c:
                    d2:a5:26:a8:05:d6:83:10:d2:5e:15:c2:d1:49:5f:
                    ec:41:c4:7b:12:9b:89:8e:81:f1:40:1e:b3:52:76:
                    29:74:eb:31:66:5a:1a:ae:ac:2c:c9:02:5c:0e:40:
                    d8:e4:09:84:8e:fa:3b:2b:d8:79:85:d4:26:32:93:
                    de:ff:f9:20:e7:6b:35:d5:71:91:f1:2f:31:30:dc:
                    6b:b0:ed:0e:d5:a1:40:18:3b:e7:a8:7d:56:2f:f2:
                    87:34:31:6a:a9:de:8d:23:13:80:18:76:08:db:40:
                    68:5a:8a:22:6a:ff:bd:c5:b7:6f:d0:b2:bd:5c:37:
                    b0:ba:5a:11:f7:04:6f:d3:c1:71:f8:6c:38:0a:77:
                    3b:23:af:4b:49:cd:aa:59:cd:73:92:f7:db:f7:ec:
                    1c:ad:8f:74:21:d1:c6:f7:7f:d5:ff:7c:c6:a1:a1:
                    0f:c4:79:d5:50:c9:d6:22:c2:d2:de:a0:c3:73:9f:
                    6d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:96:52:A1:FA:6F:13:34:A8:03:B6:2A:AA:0E:47:87:36:81:06:49
            X509v3 Authority Key Identifier:
                keyid:AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:64:a2:71:8d:ff:a2:d0:3b:31:db:23:66:1b:25:33:be:a1:
         ba:a4:94:58:54:02:34:30:7d:09:75:39:cd:0d:a6:74:67:de:
         e2:8d:6d:2d:dd:2b:0c:9a:e0:0e:3a:2f:e3:e9:a2:8f:c3:41:
         cc:e2:2a:53:ab:56:31:a2:b1:35:4a:91:1c:c4:c8:11:d7:f5:
         0a:39:bb:5d:cc:b3:67:7e:ae:26:6d:e7:60:fb:b3:61:5d:93:
         02:dd:d7:fe:50:f9:b6:58:d9:e8:d7:71:f1:fa:0c:21:ff:cb:
         53:9f:0c:8c:41:05:37:b2:51:77:d5:ca:af:fb:99:6e:e8:b7:
         d9:f5:37:40:3b:28:b2:da:12:7d:d4:6b:bd:1b:c7:77:36:d3:
         93:d7:84:7e:a2:75:c2:70:54:60:2d:b7:f6:9d:3a:f4:5c:c2:
         ee:3f:5b:9b:18:a7:1e:4c:e9:d7:2b:70:bb:05:a9:10:4a:2e:
         b0:54:38:18:d4:4f:ff:a7:41:f1:40:38:7b:77:3a:cf:bf:6a:
         b6:9b:17:54:a1:c6:a8:a7:ed:36:f5:5c:a6:5b:6c:4e:cf:f4:
         60:9f:7c:ea:8a:da:93:72:e9:2f:92:a5:80:91:0e:0a:bf:ff:
         8e:aa:bf:4c:b2:ee:b9:a4:59:51:22:e6:22:83:ad:a8:fb:36:
         34:24:31:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 19:12:21 2025 by rpki-client